linux - Linux Kernel (branches are rebased on master from time to time)

Age	Commit message (Expand)	Author	Files	Lines
2016-07-20	qstr: constify dentry_init_security	Al Viro	2	-2/+2
2016-07-12	apparmor: fix arg_size computation for when setprocattr is null terminated	John Johansen	1	-1/+1
2016-07-12	apparmor: fix oops, validate buffer size in apparmor_setprocattr()	Vegard Nossum	1	-17/+19
2016-07-12	apparmor: do not expose kernel stack	Heinrich Schuchardt	1	-1/+3
2016-07-12	apparmor: fix module parameters can be changed after policy is locked	John Johansen	3	-13/+29
2016-07-12	apparmor: fix oops in profile_unpack() when policy_db is not present	John Johansen	1	-0/+3
2016-07-12	apparmor: don't check for vmalloc_addr if kvzalloc() failed	John Johansen	1	-5/+5
2016-07-12	apparmor: add missing id bounds check on dfa verification	John Johansen	2	-0/+3
2016-07-12	apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task	Jeff Mahoney	1	-2/+4
2016-07-12	apparmor: use list_next_entry instead of list_entry_next	Geliang Tang	1	-5/+3
2016-07-12	apparmor: fix refcount race when finding a child profile	John Johansen	1	-1/+3
2016-07-12	apparmor: fix ref count leak when profile sha1 hash is read	John Johansen	1	-0/+1
2016-07-12	apparmor: check that xindex is in trans_table bounds	John Johansen	1	-1/+1
2016-07-12	apparmor: ensure the target profile name is always audited	John Johansen	1	-11/+9
2016-07-12	apparmor: fix audit full profile hname on successful load	John Johansen	1	-1/+1
2016-07-12	apparmor: fix log failures for all profiles in a set	John Johansen	1	-10/+19
2016-07-12	apparmor: fix put() parent ref after updating the active ref	John Johansen	1	-1/+1
2016-07-12	apparmor: add parameter to control whether policy hashing is used	John Johansen	4	-6/+25
2016-07-12	apparmor: internal paths should be treated as disconnected	John Johansen	1	-28/+36
2016-07-12	apparmor: fix disconnected bind mnts reconnection	John Johansen	1	-1/+4
2016-07-12	apparmor: fix update the mtime of the profile file on replacement	John Johansen	1	-0/+2
2016-07-12	apparmor: exec should not be returning ENOENT when it denies	John Johansen	1	-1/+1
2016-07-12	apparmor: fix uninitialized lsm_audit member	John Johansen	2	-2/+4
2016-07-12	apparmor: fix replacement bug that adds new child to old parent	John Johansen	1	-1/+1
2016-07-12	apparmor: fix refcount bug in profile replacement	John Johansen	1	-2/+2
2016-07-09	Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...	James Morris	2	-2/+2
2016-07-08	Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...	James Morris	1	-0/+3
2016-07-08	apparmor: fix oops, validate buffer size in apparmor_setprocattr()	Vegard Nossum	1	-17/+19
2016-07-07	Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...	James Morris	7	-64/+73
2016-07-05	evm: Translate user/group ids relative to s_user_ns when computing HMAC	Seth Forshee	1	-2/+2
2016-06-30	Merge branch 'd_real' of git://git.kernel.org/pub/scm/linux/kernel/git/mszere...	Al Viro	5	-7/+14
2016-06-30	ima: extend the measurement entry specific pcr	Eric Richter	1	-3/+3
2016-06-30	ima: change integrity cache to store measured pcr	Eric Richter	3	-3/+11
2016-06-30	ima: redefine duplicate template entries	Eric Richter	1	-3/+4
2016-06-30	ima: change ima_measurements_show() to display the entry specific pcr	Eric Richter	1	-5/+4
2016-06-30	ima: include pcr for each measurement log entry	Eric Richter	4	-8/+13
2016-06-30	ima: extend ima_get_action() to return the policy pcr	Eric Richter	5	-7/+14
2016-06-30	ima: add policy support for extending different pcrs	Eric Richter	1	-1/+28
2016-06-30	integrity: add measured_pcrs field to integrity cache	Eric Richter	2	-0/+3
2016-06-27	calipso: Add a label cache.	Huw Davies	1	-3/+6
2016-06-27	netlabel: Pass a family parameter to netlbl_skbuff_err().	Huw Davies	4	-8/+10
2016-06-27	calipso: Allow the lsm to label the skbuff directly.	Huw Davies	1	-0/+15
2016-06-27	calipso: Allow request sockets to be relabelled by the lsm.	Huw Davies	1	-1/+1
2016-06-27	netlabel: Prevent setsockopt() from changing the hop-by-hop option.	Huw Davies	1	-1/+16
2016-06-27	calipso: Set the calipso socket label to match the secattr.	Huw Davies	1	-1/+1
2016-06-24	selinux: Add support for unprivileged mounts from user namespaces	Seth Forshee	1	-0/+23
2016-06-24	Smack: Handle labels consistently in untrusted mounts	Seth Forshee	1	-10/+19
2016-06-24	Smack: Add support for unprivileged mounts from user namespaces	Seth Forshee	2	-12/+37
2016-06-24	fs: Treat foreign mounts as nosuid	Andy Lutomirski	2	-2/+8
2016-06-24	fs: Limit file caps to the user namespace of the super block	Seth Forshee	1	-0/+2